Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/XGgA_OjEyyJMejd-_SZgosM7YAM.roa
File: XGgA_OjEyyJMejd-_SZgosM7YAM.roa (raw, json)
Hash identifier: sclUDwoJ6Naz6q2cIOyHankg68pgHAepPwlcziNIveY=
Subject key identifier: 5C:68:00:FC:E8:C4:CB:22:4C:7A:37:7E:FD:26:60:A2:C3:3B:60:03
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F728C3BF2E7B15F468ED5EE87087E68F
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/XGgA_OjEyyJMejd-_SZgosM7YAM.roa
Signing time: Thu 01 Oct 2026 11:10:38 +0000
ROA not before: Thu 01 Oct 2026 11:10:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5483
IP address blocks: 79.120.198.0/24 maxlen: 24
79.120.200.0/24 maxlen: 24
193.226.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:28:c3:bf:2e:7b:15:f4:68:ed:5e:e8:70:87:e6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 11:10:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c6800fce8c4cb224c7a377efd2660a2c33b6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:9a:23:29:fe:43:5a:fa:2b:97:75:27:82:
fe:c1:a9:cd:24:61:0a:2d:47:62:10:a1:9a:32:79:
8e:5c:d1:f4:8d:49:77:2e:2e:ec:cb:b9:57:b1:a5:
8e:61:7e:49:81:d1:b6:90:65:63:c2:78:f4:f8:19:
28:39:a9:30:f0:44:10:92:4b:4b:e3:f4:aa:a7:5e:
88:4e:55:93:c3:5f:3e:b1:98:ff:e7:b6:25:d1:16:
aa:84:4d:b1:a1:81:0b:87:be:1f:6c:dd:45:f9:79:
5d:83:ea:44:29:2c:a0:43:74:05:cd:ec:b8:26:cf:
62:90:5a:2b:1f:5b:47:dc:ad:92:03:22:f5:4f:9e:
41:4d:4e:80:d3:52:6e:cd:00:69:53:f1:a9:52:40:
e1:f4:d6:b6:24:61:31:1f:f8:dc:4d:0c:a7:b2:3e:
93:d3:ea:1a:3a:40:7d:31:2c:19:23:ea:09:64:9a:
0b:db:1e:2b:d4:61:bb:35:d8:ca:64:bc:41:30:d6:
a6:d2:7c:54:50:cd:37:b5:35:67:c1:c2:e4:6a:17:
53:fa:60:e2:77:c0:ac:43:14:77:96:40:96:f8:5e:
46:1b:b5:e6:2d:7a:46:79:e3:4f:ed:28:c6:88:cc:
74:00:ef:dd:1a:28:62:c2:76:e4:89:2f:0f:f3:75:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:00:FC:E8:C4:CB:22:4C:7A:37:7E:FD:26:60:A2:C3:3B:60:03
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/XGgA_OjEyyJMejd-_SZgosM7YAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.198.0/24
79.120.200.0/24
193.226.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:07:4d:b7:e6:4a:79:71:07:d5:5e:f4:70:80:04:a6:e6:c3:
19:b2:94:a3:5f:7c:a0:e3:33:88:65:22:bc:3b:79:44:37:6a:
b5:4b:fe:83:6c:a4:0f:99:a7:72:a5:c6:fc:b0:f1:b2:ee:35:
c2:df:1d:6c:be:01:5f:2b:32:fa:67:34:e8:ee:7c:eb:57:ce:
1f:0c:62:83:53:71:33:9b:46:c6:be:c7:e9:e0:88:83:6a:78:
51:91:be:95:1d:38:d1:ba:3f:5a:07:c1:cb:a2:4e:db:04:49:
0c:5a:3e:49:1b:b4:6b:d2:a1:19:91:19:47:4b:a2:d8:9e:ef:
ba:31:29:e2:7e:65:15:53:da:dc:6d:e2:b3:f2:59:1c:3b:a4:
7c:84:0e:6e:45:79:42:77:fd:51:2b:27:31:36:39:69:e7:a8:
f9:15:b4:c3:41:36:75:46:ff:d6:68:dc:38:6c:03:51:1d:c4:
e1:a4:db:da:f3:98:26:f6:d2:11:9b:3b:e6:62:38:36:3b:06:
ef:e1:c5:3a:d3:94:0e:f5:45:82:8a:99:66:db:4f:90:b5:fb:
64:bb:ca:91:92:ed:00:88:49:ae:dc:6a:ee:ba:ea:3f:32:1f:
fa:55:66:e7:3c:22:06:4f:1a:23:ce:ad:25:d7:f9:e4:4a:1a:
02:d2:52:f5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaD3KMO/LnsV9GjtXuhwh+aPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzY2OWVhZTg3NmQyZjIzYjlmODUyN2U4OGE4NzAyZGJk
NDIzZTMwHhcNMjYxMDAxMTExMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzY4MDBmY2U4YzRjYjIyNGM3YTM3N2VmZDI2NjBhMmMzM2I2MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI6aIyn+Q1r6K5d1J4L+wanNJGEK
LUdiEKGaMnmOXNH0jUl3Li7sy7lXsaWOYX5JgdG2kGVjwnj0+BkoOakw8EQQkktL
4/Sqp16ITlWTw18+sZj/57Yl0RaqhE2xoYELh74fbN1F+Xldg+pEKSygQ3QFzey4
Js9ikForH1tH3K2SAyL1T55BTU6A01JuzQBpU/GpUkDh9Na2JGExH/jcTQynsj6T
0+oaOkB9MSwZI+oJZJoL2x4r1GG7NdjKZLxBMNam0nxUUM03tTVnwcLkahdT+mDi
d8CsQxR3lkCW+F5GG7XmLXpGeeNP7SjGiMx0AO/dGihiwnbkiS8P83XEFQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFxoAPzoxMsiTHo3fv0mYKLDO2ADMB8GA1UdIwQY
MBaAFOo2aerodtLyO5+FJ+iKhwLb1CPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjct
M2FjZTFlZmYzYTI0LzEvWEdnQV9PakV5eUpNZWpkLV9TWmdvc003WUFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjctM2FjZTFlZmYzYTI0
LzEvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT3jGAwQA
T3jIAwQAweLtMA0GCSqGSIb3DQEBCwUAA4IBAQAcB0235kp5cQfVXvRwgASm5sMZ
spSjX3yg4zOIZSK8O3lEN2q1S/6DbKQPmadypcb8sPGy7jXC3x1svgFfKzL6ZzTo
7nzrV84fDGKDU3Ezm0bGvsfp4IiDanhRkb6VHTjRuj9aB8HLok7bBEkMWj5JG7Rr
0qEZkRlHS6LYnu+6MSnifmUVU9rcbeKz8lkcO6R8hA5uRXlCd/1RKycxNjlp56j5
FbTDQTZ1Rv/WaNw4bANRHcThpNva85gm9tIRmzvmYjg2Owbv4cU605QO9UWCiplm
20+Qtftku8qRku0AiEmu3Gruuuo/Mh/6VWbnPCIGTxojzq0l1/nkShoC0lL1
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:39 2026 by rpki-client